> -----Original Message----- > From: Terry Schmitt [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 27, 2008 10:07 AM > To: CF-Talk > Subject: How is CF8 working on shared servers? > > I had previously hosted at Crystaltech on shared CF7. Due to so many CF > mapping issues I finally gave up and moved to a viviotech and then ahp > VPS. I love having a VPS. The flexibility to configure as I see fit is > priceless. Due to the ahp issues that we're having, though, I'm on the > search for the holy grail again :( > > I'm not asking for which hosting company to use, but rather, how is CF8 > working on shared servers? My main beef was the constant struggle with > CF mappings. Since CF8 now supports application level mappings, that > should really be a non-issue now.
I think this was the main issue (since CFMODULE and CFCs are often very dependent on mappings such that even simple apps usually need them) and, in general, simple applications should be fine on shared hosting. But there are still a lot of "gotchas" - you're still running in the same instance. There are still tags and capabilities that can be problematic on shared hosts (especially "external" services like COM). Tags like CFDIRECTORY and others that give broad, server-level access may still pose risks. Many hosts just don't enable them, others let the chips fall where they may. None of the shared information is really, truly "safe". If you have the application name then you can see all the information stored in it for example. A good host will use various means to prevent people from getting access to each other's folders with a shared process like CF running then it's more likely that a bug or misconfiguration can allow such access. Once you have that kind of access it's very likely that you'll be able to get database access and perhaps dangerous information. For that reason alone I wouldn't consider hosting any eCommerce or delicate/sensitive apps on a shared server. Even something as simple as an email list or the like might end up costing you more than you'll save if it gets compromised. Finally you always still have the good old threat of idiots creating instability on the server. ColdFusion's gotten better with tools that can mitigate this but nothing will ever stop it completely... there's still the chance that some borderline mental case will do something to take everyone down. The fact remains that, even with the improvements, CF was just never designed (and probably never will be) for shared hosting. You can make it work, mostly, but it's definitely a square peg in a round hole. Jim Davis ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:299967 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
